{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,17]],"date-time":"2026-02-17T12:17:16Z","timestamp":1771330636986,"version":"3.50.1"},"reference-count":55,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2016,10,13]],"date-time":"2016-10-13T00:00:00Z","timestamp":1476316800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["11361046"],"award-info":[{"award-number":["11361046"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61602225"],"award-info":[{"award-number":["61602225"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Fund of Nigxia province China","award":["NZ16260"],"award-info":[{"award-number":["NZ16260"]}]},{"name":"the Fundamental research Fund for Senior School in Ningxia province China","award":["NGY2015124"],"award-info":[{"award-number":["NGY2015124"]}]},{"name":"the Key research Fund of Ningxia Normal University, Ningxia Province China","award":["NXSFZD1517, NXSFZD1603\uff0cNXSFZD1608"],"award-info":[{"award-number":["NXSFZD1517, NXSFZD1603\uff0cNXSFZD1608"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The development of intrusion detection systems (IDS) that are adapted to allow routers and network defence systems to detect malicious network traffic disguised as network protocols or normal access is a critical challenge. This paper proposes a novel approach called SCDNN, which combines spectral clustering (SC) and deep neural network (DNN) algorithms. First, the dataset is divided into k subsets based on sample similarity using cluster centres, as in SC. Next, the distance between data points in a testing set and the training set is measured based on similarity features and is fed into the deep neural network algorithm for intrusion detection. Six KDD-Cup99 and NSL-KDD datasets and a sensor network dataset were employed to test the performance of the model. These experimental results indicate that the SCDNN classifier not only performs better than backpropagation neural network (BPNN), support vector machine (SVM), random forest (RF) and Bayes tree models in detection accuracy and the types of abnormal attacks found. It also provides an effective tool of study and analysis of intrusion detection in large networks.<\/jats:p>","DOI":"10.3390\/s16101701","type":"journal-article","created":{"date-parts":[[2016,10,13]],"date-time":"2016-10-13T10:33:10Z","timestamp":1476354790000},"page":"1701","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":183,"title":["A Hybrid Spectral Clustering and Deep Neural Network Ensemble Algorithm for Intrusion Detection in Sensor Networks"],"prefix":"10.3390","volume":"16","author":[{"given":"Tao","family":"Ma","sequence":"first","affiliation":[{"name":"School of Information Science and Engineering, Lanzhou University, Lanzhou 730000, China"},{"name":"School of Mathematical and Computer Science, Ningxia Normal University, Guyuan 756000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fen","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Mathematical and Computer Science, Ningxia Normal University, Guyuan 756000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianjun","family":"Cheng","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Lanzhou University, Lanzhou 730000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Lanzhou University, Lanzhou 730000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyun","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Lanzhou University, Lanzhou 730000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2016,10,13]]},"reference":[{"key":"ref_1","first-page":"84","article-title":"Research on Intrusion Detection and Response: A Survey","volume":"1","author":"Kabiri","year":"2005","journal-title":"Int. J. Netw. Secur."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Barbara, D., Wu, N., and Jajodia, S. (2001, January 5\u20137). Detecting Novel Network Intrusions Using Bayes Estimators. Proceedings of the First SIAM International Conference on Data Mining, Chicago, IL, USA.","DOI":"10.1137\/1.9781611972719.28"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","article-title":"An intrusion-detection model","volume":"SE-13","author":"Denning","year":"1987","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_4","unstructured":"Dokas, P., Ertoz, L., Kumar, V., Lazarevic, A., Srivastava, J., and Tan, P.N. (2002, January 1\u20133). Data mining for network intrusion detection. Proceedings of the NSF Workshop on Next Generation Data Mining, Baltimore, MD, USA."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"2617","DOI":"10.1016\/j.cor.2004.03.019","article-title":"Application of SVM and ANN for intrusion detection","volume":"32","author":"Chen","year":"2005","journal-title":"Comput. Oper. Res."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"649","DOI":"10.1109\/TSMCC.2008.923876","article-title":"Random-forests-based network intrusion detection systems","volume":"38","author":"Zhang","year":"2008","journal-title":"IEEE Trans. Syst. Man Cybern. C Appl. Rev."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"11994","DOI":"10.1016\/j.eswa.2009.05.029","article-title":"Intrusion detection by machine learning: A review","volume":"36","author":"Tsai","year":"2009","journal-title":"Expert Syst. Appl."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1109\/MSP.2005.153","article-title":"Network security basics","volume":"3","author":"Marin","year":"2005","journal-title":"IEEE Secur. Priv."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1253","DOI":"10.1016\/j.neucom.2014.08.070","article-title":"A fuzzy anomaly detection system based on hybrid pso-kmeans algorithm in content-centric networks","volume":"149","author":"Karami","year":"2015","journal-title":"Neurocomputing"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"360","DOI":"10.1016\/j.asoc.2015.10.011","article-title":"A novel SVM-kNN-PSO ensemble method for intrusion detection system","volume":"38","author":"Aburomman","year":"2016","journal-title":"Appl. Soft Comput."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Javaid, A., Niyaz, Q., Sun, W., and Alam, M. (2015, January 3\u20135). A Deep Learning Approach for Network Intrusion Detection System. Proceedings of the 9th EAI International Conference on Bio-inspired Information and Communications Technologies (formerly BIONETICS), New York, NY, USA.","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Kang, M.J., and Kang, J.W. (2016). Intrusion Detection System Using Deep Neural Network for In-Vehicle Network Security. PLoS ONE, 11.","DOI":"10.1371\/journal.pone.0155781"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.neucom.2012.11.050","article-title":"Network anomaly detection with the restricted Boltzmann machine","volume":"122","author":"Fiore","year":"2013","journal-title":"Neurocomputing"},{"key":"ref_14","unstructured":"Salama, M.A., Eid, H.F., Ramadan, R.A., Darwish, A., and Hassanien, A.E. (2011). Soft Computing in Industrial Applications, Springer."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/MCOM.2002.1039860","article-title":"Network intrusion and fault detection: A statistical anomaly approach","volume":"40","author":"Manikopoulos","year":"2002","journal-title":"IEEE Commun. Mag."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"715","DOI":"10.1109\/TSG.2011.2160298","article-title":"Energy efficient security algorithm for power grid wide area monitoring system","volume":"2","author":"Qiu","year":"2011","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_17","unstructured":"Roman, R., Zhou, J., and Lopez, J. (2006, January 8\u201310). Applying intrusion detection systems to wireless sensor networks. Proceedings of the IEEE Consumer Communications & Networking Conference (CCNC 2006), Las Vegas, NV, USA."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Sommer, R., and Paxson, V. (2010, January 16\u201319). Outside the closed world: On using machine learning for network intrusion detection. Proceedings of the 31st IEEE Symposium on Security and Privacy, S&P 2010, Oakland, CA, USA.","DOI":"10.1109\/SP.2010.25"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"545","DOI":"10.1023\/A:1024600519144","article-title":"Intrusion detection techniques for mobile wireless networks","volume":"9","author":"Zhang","year":"2003","journal-title":"Wirel. Netw."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.knosys.2015.01.009","article-title":"CANN: An intrusion detection system based on combining cluster centers and nearest neighbors","volume":"78","author":"Lin","year":"2015","journal-title":"Knowl. Based Syst."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Grover, A., Kapoor, A., and Horvitz, E. (2015, January 10\u201313). A Deep Hybrid Model for Weather Forecasting. Proceedings of the 21th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Sydney, Australia.","DOI":"10.1145\/2783258.2783275"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A.A. (2009, January 8\u201310). A detailed analysis of the KDD CUP 99 data set. Proceedings of the Second IEEE Symposium on Computational Intelligence for Security and Defence Applications, Ottawa, ON, Canada.","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref_23","unstructured":"Chilimbi, T., Suzue, Y., Apacible, J., and Kalyanaraman, K. (2014, January 6\u20138). Project adam: Building an efficient and scalable deep learning training system. Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14), Broomfield, CO, USA."},{"key":"ref_24","unstructured":"Huang, P.S., He, X., Gao, J., Deng, L., Acero, A., and Heck, L. (November, January 27). Learning deep structured semantic models for web search using clickthrough data. Proceedings of the 22nd ACM International Conference on Information & Knowledge Management, San Francisco, CA, USA."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1109\/TASL.2011.2134090","article-title":"Context-dependent pre-trained deep neural networks for large-vocabulary speech recognition","volume":"20","author":"Dahl","year":"2012","journal-title":"IEEE Trans. Audio Speech Lang. Process."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MSP.2012.2205597","article-title":"Deep neural networks for acoustic modeling in speech recognition: The shared views of four research groups","volume":"29","author":"Hinton","year":"2012","journal-title":"IEEE Signal Process. Mag."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"888","DOI":"10.1109\/34.868688","article-title":"Normalized cuts and image segmentation","volume":"22","author":"Shi","year":"2000","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_28","first-page":"849","article-title":"On spectral clustering: Analysis and an algorithm","volume":"2","author":"Ng","year":"2002","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1016\/j.neunet.2014.09.003","article-title":"Deep learning in neural networks: An overview","volume":"61","author":"Schmidhuber","year":"2015","journal-title":"Neural Netw."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1798","DOI":"10.1109\/TPAMI.2013.50","article-title":"Representation learning: A review and new perspectives","volume":"35","author":"Bengio","year":"2013","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"504","DOI":"10.1126\/science.1127647","article-title":"Reducing the dimensionality of data with neural networks","volume":"313","author":"Hinton","year":"2006","journal-title":"Science"},{"key":"ref_32","unstructured":"Zheng, Y., Liu, Q., Chen, E., Ge, Y., and Zhao, J.L. (2014). Web-Age Information Management, Springer."},{"key":"ref_33","unstructured":"Glorot, X., and Bengio, Y. (2010, January 13\u201315). Understanding the difficulty of training deep feedforward neural networks. Proceedings of the 13th International Conference on Artificial Intelligence and Statistics (AISTATS\u201910), Sardinia, Italy."},{"key":"ref_34","unstructured":"Hinton, G.E., and Zemel, R.S. (December, January 29). Autoencoders, minimum description length, and Helmholtz free energy. Proceedings of the 6th International Conference on Neural Information Processing Systems, Denver, CO, USA."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"607","DOI":"10.1038\/381607a0","article-title":"Emergence of simple-cell receptive field properties by learning a sparse code for natural images","volume":"381","author":"Olshausen","year":"1996","journal-title":"Nature"},{"key":"ref_36","unstructured":"Ng, A. (2011). Sparse Autoencoder, Stanford University. CS294A Lecture notes."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1214\/aoms\/1177729694","article-title":"On information and sufficiency","volume":"22","author":"Kullback","year":"1951","journal-title":"Ann. Math. Stat."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/0004-3702(89)90049-0","article-title":"Connectionist learning procedures","volume":"40","author":"Hinton","year":"1989","journal-title":"Artif. Intell."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Vincent, P., Larochelle, H., Bengio, Y., and Manzagol, P.A. (2008, January 5\u20139). Extracting and composing robust features with denoising autoencoders. Proceedings of the 25th international conference on Machine learning, Helsinki, Finland.","DOI":"10.1145\/1390156.1390294"},{"key":"ref_40","first-page":"625","article-title":"Why does unsupervised pre-training help deep learning?","volume":"11","author":"Erhan","year":"2010","journal-title":"J. Mach. Learn. Res."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"1527","DOI":"10.1162\/neco.2006.18.7.1527","article-title":"A fast learning algorithm for deep belief nets","volume":"18","author":"Hinton","year":"2006","journal-title":"Neural Comput."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1109\/72.279181","article-title":"Learning long-term dependencies with gradient descent is difficult","volume":"5","author":"Bengio","year":"1994","journal-title":"IEEE Trans. Neural Netw."},{"key":"ref_43","unstructured":"Palm, R.B. (2012). Prediction as a Candidate for Learning Deep Hierarchical Models of Data. [Master\u2019s Thesis, Technical University of Denmark]."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"439","DOI":"10.1016\/j.engappai.2006.09.005","article-title":"A hierarchical SOM-based intrusion detection system","volume":"20","author":"Kayacik","year":"2007","journal-title":"Eng. Appl. Artif. Intell."},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"6225","DOI":"10.1016\/j.eswa.2010.02.102","article-title":"A new approach to intrusion detection using Artificial Neural Networks and fuzzy clustering","volume":"37","author":"Wang","year":"2010","journal-title":"Expert Syst. Appl."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"7698","DOI":"10.1016\/j.eswa.2010.12.141","article-title":"Incremental SVM based on reserved set for network intrusion detection","volume":"38","author":"Yi","year":"2011","journal-title":"Expert Syst. Appl."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"13492","DOI":"10.1016\/j.eswa.2012.07.009","article-title":"A network intrusion detection system based on a Hidden Naive Bayes multiclass classifier","volume":"39","author":"Koc","year":"2012","journal-title":"Expert Syst. Appl."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"95","DOI":"10.1016\/j.ins.2014.09.025","article-title":"A nature-inspired approach to speed up optimum-path forest clustering and its application to intrusion detection in computer networks","volume":"294","author":"Costa","year":"2015","journal-title":"Inf. Sci."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Japkowicz, N., and Shah, M. (2011). Evaluating Learning Algorithms: A Classification Perspective, Cambridge University Press.","DOI":"10.1017\/CBO9780511921803"},{"key":"ref_50","first-page":"338","article-title":"Detecting Blackhole Attack on AODV-based Mobile Ad Hoc Networks by Dynamic Learning Method","volume":"5","author":"Kurosawa","year":"2007","journal-title":"Int. J. Netw. Sec."},{"key":"ref_51","unstructured":"Huang, Y.A., and Lee, W. (2004). International Workshop on Recent Advances in Intrusion Detection, Springer."},{"key":"ref_52","unstructured":"Maxion, R.A., and Roberts, R.R. (2004). Proper Use of ROC Curves in Intrusion\/Anomaly Detection, University of Newcastle upon Tyne, Computing Science."},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"861","DOI":"10.1016\/j.patrec.2005.10.010","article-title":"An introduction to ROC analysis","volume":"27","author":"Fawcett","year":"2006","journal-title":"Pattern Recognit. Lett."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1016\/j.renene.2015.06.034","article-title":"Transfer learning for short-term wind speed prediction with deep neural networks","volume":"85","author":"Hu","year":"2016","journal-title":"Renew. Energy"},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1007\/s11222-007-9033-z","article-title":"A tutorial on spectral clustering","volume":"17","author":"Luxburg","year":"2007","journal-title":"Stat. Comput."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/16\/10\/1701\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T19:32:54Z","timestamp":1760211174000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/16\/10\/1701"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,10,13]]},"references-count":55,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2016,10]]}},"alternative-id":["s16101701"],"URL":"https:\/\/doi.org\/10.3390\/s16101701","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,10,13]]}}}